[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_299":300,"_301":302},"routes/_app.x.$handle.$name",{"_98":97,"_32":46,"_106":88,"_27":54,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":60,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",22,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","shared/types.ts","latestPath","fileId","b8b6a26a-89d4-11f1-bf8b-1607ee4eb77e","name","types.ts","fileType","script","content","/** Shape of the /api/lookup response. Kept in shared/ as the contract the\n * frontend renders against. */\n\nexport type LookupStatus =\n | \"registered\" // the registry returned a record\n | \"available\" // the registry has no record for this name\n | \"unsupported\" // no RDAP service is published for this TLD\n | \"invalid\" // the input isn't a domain name we can query\n | \"error\"; // the registry failed to answer\n\nexport interface DomainRecord {\n registrar?: string;\n registrarIanaId?: string;\n registered?: string;\n expires?: string;\n updated?: string;\n statuses: string[];\n nameservers: string[];\n dnssec?: boolean;\n}\n\nexport interface LookupResult {\n /** What the visitor typed. */\n query: string;\n /** The normalized, punycoded name that was queried. */\n domain: string;\n /** Unicode form, when the name was an IDN. */\n unicodeName?: string;\n tld: string;\n status: LookupStatus;\n /** Hostname of the RDAP service that answered. */\n source?: string;\n /** UTC timestamp of the answer. */\n answeredAt?: string;\n record?: DomainRecord;\n /** Human-readable explanation for invalid, unsupported, and error results. */\n message?: string;\n /** Caveat worth showing alongside an otherwise good answer. */\n note?: string;\n}\n","/** Shape of the /api/lookup and /api/pricing responses. Kept in shared/ as the\n * contract the frontend renders against. */\n\nexport type LookupStatus =\n | \"registered\" // the registry returned a record\n | \"available\" // the registry has no record for this name\n | \"unsupported\" // no RDAP service is published for this TLD\n | \"invalid\" // the input isn't a domain name we can query\n | \"error\"; // the registry failed to answer\n\nexport interface DomainRecord {\n registrar?: string;\n registrarIanaId?: string;\n registered?: string;\n expires?: string;\n updated?: string;\n statuses: string[];\n nameservers: string[];\n dnssec?: boolean;\n}\n\nexport interface DomainPricing {\n /** The suffix Porkbun prices. Some ccTLDs are sold at the second level, so\n * this can be two labels (`co.uk`) rather than the bare TLD. */\n suffix: string;\n /** First-year price. Often promotional, and often below the renewal. */\n registration?: number;\n /** What the name costs every year after the first. */\n renewal?: number;\n /** Price to move an existing registration in, usually a year included. */\n transfer?: number;\n /** ISO 4217 code for the amounts above. */\n currency: string;\n}\n\nexport interface LookupResult {\n /** What the visitor typed. */\n query: string;\n /** The normalized, punycoded name that was queried. */\n domain: string;\n /** Unicode form, when the name was an IDN. */\n unicodeName?: string;\n tld: string;\n status: LookupStatus;\n /** Hostname of the RDAP service that answered. */\n source?: string;\n /** UTC timestamp of the answer. */\n answeredAt?: string;\n record?: DomainRecord;\n /** Human-readable explanation for invalid, unsupported, and error results. */\n message?: string;\n /** Caveat worth showing alongside an otherwise good answer. */\n note?: string;\n}\n\n/**\n * Porkbun's answer to \"will you sell me this exact name?\", which is a different\n * question from RDAP's \"is there a registration record?\". Reserved, blocked and\n * registry-held names have no RDAP object, so they read as available there\n * while a registrar still refuses them.\n */\nexport interface DomainAvailability {\n /** Porkbun will sell it. False means it exists, is reserved, or is withheld. */\n registrable: boolean;\n /** Registry-tier premium, priced per-name rather than off the list. */\n premium: boolean;\n /** Per-name first-year price. Differs from the list price on premium names. */\n price?: number;\n /** The same name's price once any first-year promotion lapses. */\n regularPrice?: number;\n /** Whether `price` is a promotional first-year rate. */\n firstYearPromo?: boolean;\n /** Years the registry makes you buy up front, when it insists on more than one. */\n minDuration?: number;\n /** UTC timestamp of the check. */\n checkedAt: string;\n}\n\nexport interface PricingResult {\n /** The normalized name the price was matched against. */\n domain: string;\n /** Absent when Porkbun doesn't sell the suffix, or didn't answer in time. */\n pricing?: DomainPricing;\n /**\n * Absent whenever the check didn't run or didn't answer — no credentials, not\n * asked for, rate-limited, or an error. Absent means \"unknown\", never\n * \"registrable\": only an explicit answer from Porkbun sets this.\n */\n availability?: DomainAvailability;\n}\n","createdAt",["D",1787602431956],"branchVersion","branchId","56b9e60d-44d2-4baf-b4cd-1a7b1ec05f36","id","a00dc9e7-a23e-4397-a1f9-3cf4c617a61f","whois",["D",1785166232232],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","b8f52b40-db4b-11ef-9fdc-e7ba3d98ed08","pinnedFileId","1ae3c4c2-89d0-11f1-8211-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","c0309a09-c920-43c3-9d64-1db94f641c1a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_18":56,"_102":103,"_104":25},"branch",{"_13":87,"_32":88,"_44":43,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":46,"_96":97},"isOwned",33,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","hunterparks","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yczhIY1pIYWJ5ZnVPVjgxM0R2OENRWTJlTW0ifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":295,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":296,"_82":297,"_84":298,"_86":25},"tree",[203,207,211,213,214,215,216,217],"files",[203,204,205,206,207,208,209,210,211,212,213,214,215,216,217],"counts",{"_193":151,"_194":64,"_195":151,"_196":197,"_198":199},"contents",[127,128,129,130,131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":188,"_32":189,"_30":190,"_137":-5,"_42":43,"_41":141,"_139":60,"_39":191,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_27":192},{"_44":182,"_32":183,"_30":184,"_137":-5,"_42":43,"_41":185,"_139":60,"_39":186,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_27":187},{"_44":175,"_32":176,"_30":177,"_137":-5,"_42":43,"_41":178,"_139":60,"_39":179,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_27":181},{"_44":168,"_32":169,"_30":170,"_137":-5,"_42":43,"_41":171,"_139":60,"_39":172,"_13":151,"_34":20,"_36":173,"_24":25,"_144":-5,"_27":174},{"_44":161,"_32":162,"_30":163,"_137":-5,"_42":43,"_41":164,"_139":60,"_39":165,"_13":151,"_34":20,"_36":166,"_24":25,"_144":-5,"_27":167},{"_44":154,"_32":155,"_30":156,"_137":-5,"_42":43,"_41":157,"_139":25,"_39":158,"_13":151,"_34":20,"_36":159,"_24":25,"_144":-5,"_27":160},{"_44":146,"_32":147,"_30":148,"_137":-5,"_42":43,"_41":149,"_139":60,"_39":150,"_13":151,"_34":20,"_36":152,"_24":25,"_144":-5,"_27":153},{"_44":135,"_32":136,"_30":58,"_137":-5,"_42":43,"_41":138,"_139":25,"_39":140,"_13":141,"_34":142,"_36":143,"_24":25,"_144":46,"_27":145},"664ef423-be87-43de-aea2-23fb5e1c50ae","main.ts","parentId",21,"latest",["D",1787602431910],3,"http","import { Hono } from \"https://esm.sh/hono@4.6.14\";\nimport { readProjectFile, serveProjectFile } from \"./backend/files.ts\";\nimport { lookupPricing } from \"./backend/porkbun.ts\";\nimport { lookupDomain } from \"./backend/rdap.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, _c) => {\n throw err;\n});\n\napp.get(\"/frontend/*\", (c) => serveProjectFile(c.req.path, import.meta.url));\n\napp.get(\"/api/lookup\", async (c) => {\n const query = c.req.query(\"domain\") ?? \"\";\n const result = await lookupDomain(query);\n return c.json(result, {\n // Registry data changes rarely; a short cache keeps repeat searches off the\n // registries without hiding a registration that just happened.\n headers: { \"cache-control\": result.status === \"error\" ? \"no-store\" : \"public, max-age=60\" },\n });\n});\n\n// Kept off /api/lookup on purpose: Porkbun rebuilds its whole price list per\n// request and can take 20 seconds cold, which is no reason to hold up the\n// registry's answer. The page asks for this once the verdict is on screen.\n// `check=1` additionally asks Porkbun whether it will sell this exact name.\n// The page only sets it when the registry reported the name as available,\n// because that is the one verdict a reserved or premium name can contradict —\n// and the check is metered per account, so it isn't spent on settled answers.\napp.get(\"/api/pricing\", async (c) => {\n const result = await lookupPricing(c.req.query(\"domain\") ?? \"\", {\n checkAvailability: c.req.query(\"check\") === \"1\",\n });\n return c.json(result, {\n headers: {\n // The availability half is far more perishable than the price list, and a\n // name can be bought out from under a long cache entry.\n \"cache-control\": !result.pricing\n ? \"no-store\"\n : result.availability\n ? \"public, max-age=300\"\n : \"public, max-age=3600\",\n },\n });\n});\n\napp.get(\"/\", async (c) => c.html(await readProjectFile(\"/frontend/index.html\", import.meta.url)));\n\nexport default app.fetch;\n","label",[136],"482c4167-2489-4dc5-8d09-755c0e9334ed","deno.json","b8c0f422-89d4-11f1-96e4-1607ee4eb77e",6,["D",1785168215020],0,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[147],"6e29dcf8-2020-4414-873a-429fdc661645","README.md","b8efa9a2-89d4-11f1-8c5f-1607ee4eb77e",12,["D",1785168215381],"# whois\n\nType a domain, find out whether it's registered. The answer comes from the\nregistry of record over [RDAP](https://www.icann.org/rdap) — the protocol ICANN\nrequires registries to run alongside WHOIS — rather than from a reseller's\ncached list.\n\n## How a lookup works\n\n1. `backend/rdap.ts` normalizes what was typed: pasted URLs lose their scheme\n and path, IDNs are punycoded, a leading `www.` is dropped.\n2. The TLD is resolved to an RDAP service through\n [IANA's bootstrap file](https://data.iana.org/rdap/dns.json), cached for 12\n hours per instance.\n3. `GET /domain/` decides it: `200` means registered and carries\n the record, `404` means the registry has no entry.\n\nA handful of registries run RDAP without appearing in the bootstrap file\n(`.ac`, `.de`, `.io`, `.sh`). Those are listed in `SUPPLEMENTAL_SERVICES`, each\nverified against a known-registered name in that exact TLD. Never point a TLD at\na service that isn't authoritative for it — a foreign service answers `404`, and\n`404` is what makes this site say \"available\".\n\nTLDs with no RDAP service at all (`.co`, `.me`, and other ccTLDs) return\n`unsupported` instead of a guess.\n\n## Files\n\n| Path | What it does |\n| --------------------- | -------------------------------------------------- |\n| `main.ts` | Hono app: static routes, `GET /api/lookup?domain=` |\n| `backend/rdap.ts` | Bootstrap cache, normalization, RDAP record parsing |\n| `backend/files.ts` | Static file helpers, with a local-disk fallback |\n| `frontend/` | The page: HTML, CSS, and the renderer |\n| `shared/types.ts` | The `/api/lookup` response contract |\n\n## Running it\n\n```sh\nvt push # deploy to Val Town\ndeno run -A serve.ts # or preview locally, see below\n```\n\nFor a local preview, point Deno's server at the exported handler:\n\n```ts\nimport app from \"./main.ts\";\nDeno.serve({ port: 8787 }, app);\n```\n\n`backend/files.ts` reads from disk when it sees a `file://` URL, so the static\nroutes work outside Val Town too.\n",[155],"ca69b9ae-1cf9-4d6c-9a61-5651045b9f2b","AGENTS.md","b93476cc-89d4-11f1-aa0d-1607ee4eb77e",15,["D",1785168215146],"You are an advanced assistant specialized in generating Val Town code.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider refactoring it into subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious operations)\n- Follow modern ES6+ conventions and functional programming practices if possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = 'todo_app_users_2';\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(`SELECT * FROM ${TABLE_NAME} WHERE id = ?`, [1]);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add _2 or _3) to create a fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({ \n subject: \"Hi\", \n text: \"Hi\", \n html: \"

Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[162],"1c9e7a6c-9507-4148-bbd1-2fc34f94a828",".vtignore","b8c60a48-89d4-11f1-97dc-1607ee4eb77e",7,["D",1785168215096],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[169],"1e49960f-1466-46fa-a5e2-7137c8eecfb7","shared","b8698246-89d4-11f1-97dc-1607ee4eb77e",2,["D",1785168214472],"directory",[176],"64242c32-bb1f-495a-b292-5472fd3ed691","frontend","b898b818-89d4-11f1-9340-1607ee4eb77e",4,["D",1785168214803],[183],"57fa537f-e8b3-4f1e-b82d-2babea12af78","backend","b87e942e-89d4-11f1-97dc-1607ee4eb77e",["D",1785168214649],[189],"pulls","branches","forks","envVars",{"_200":178,"_202":151},"connections",{"_200":151,"_201":151},"count","unfilledCount","emptyCount",{"_44":188,"_32":189,"_30":190,"_137":-5,"_42":43,"_41":141,"_139":60,"_39":292,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_219":293,"_27":294},{"_44":284,"_32":285,"_30":286,"_137":190,"_42":43,"_41":287,"_139":60,"_39":288,"_13":151,"_34":35,"_36":289,"_24":25,"_144":-5,"_219":290,"_27":291},{"_44":276,"_32":277,"_30":278,"_137":190,"_42":43,"_41":279,"_139":25,"_39":280,"_13":151,"_34":35,"_36":281,"_24":25,"_144":-5,"_219":282,"_27":283},{"_44":268,"_32":269,"_30":270,"_137":190,"_42":43,"_41":271,"_139":60,"_39":272,"_13":151,"_34":35,"_36":273,"_24":25,"_144":-5,"_219":274,"_27":275},{"_44":182,"_32":183,"_30":184,"_137":-5,"_42":43,"_41":185,"_139":60,"_39":265,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_219":266,"_27":267},{"_44":257,"_32":258,"_30":259,"_137":184,"_42":43,"_41":260,"_139":25,"_39":261,"_13":64,"_34":20,"_36":262,"_24":25,"_144":-5,"_219":263,"_27":264},{"_44":249,"_32":250,"_30":251,"_137":184,"_42":43,"_41":252,"_139":25,"_39":253,"_13":64,"_34":35,"_36":254,"_24":25,"_144":-5,"_219":255,"_27":256},{"_44":241,"_32":242,"_30":243,"_137":184,"_42":43,"_41":244,"_139":25,"_39":245,"_13":64,"_34":20,"_36":246,"_24":25,"_144":-5,"_219":247,"_27":248},{"_44":175,"_32":176,"_30":177,"_137":-5,"_42":43,"_41":178,"_139":60,"_39":238,"_13":151,"_34":180,"_36":-5,"_24":25,"_144":-5,"_219":239,"_27":240},{"_44":234,"_32":33,"_30":31,"_137":177,"_42":43,"_41":14,"_139":25,"_39":235,"_13":64,"_34":35,"_36":38,"_24":25,"_144":-5,"_219":236,"_27":237},{"_44":168,"_32":169,"_30":170,"_137":-5,"_42":43,"_41":171,"_139":60,"_39":231,"_13":151,"_34":20,"_36":173,"_24":25,"_144":-5,"_219":232,"_27":233},{"_44":161,"_32":162,"_30":163,"_137":-5,"_42":43,"_41":164,"_139":60,"_39":228,"_13":151,"_34":20,"_36":166,"_24":25,"_144":-5,"_219":229,"_27":230},{"_44":154,"_32":155,"_30":156,"_137":-5,"_42":43,"_41":157,"_139":25,"_39":225,"_13":151,"_34":20,"_36":159,"_24":25,"_144":-5,"_219":226,"_27":227},{"_44":146,"_32":147,"_30":148,"_137":-5,"_42":43,"_41":149,"_139":60,"_39":222,"_13":151,"_34":20,"_36":152,"_24":25,"_144":-5,"_219":223,"_27":224},{"_44":135,"_32":136,"_30":58,"_137":-5,"_42":43,"_41":138,"_139":25,"_39":218,"_13":141,"_34":142,"_36":143,"_24":25,"_144":46,"_219":220,"_27":221},["D",1787602431910],"children",[],[136],["D",1785168215020],[],[147],["D",1785168215381],[],[155],["D",1785168215146],[],[162],["D",1785168215096],[],[169],"d878d001-c5d5-48cb-86eb-c065e96f2eba",["D",1787602431956],[],[176,33],["D",1785168214472],[212],[176],"c03558d0-6d34-4b89-888d-92355792e200","style.css","b902bd26-89d4-11f1-8536-1607ee4eb77e",18,["D",1785168433626],":root {\n --paper: #c9d3d6;\n --card: #f4f6f5;\n --ink: #16232b;\n --ink-2: #5c6d74;\n --rule: #a9b7bb;\n --stamp-taken: #a32b22;\n --stamp-free: #1c6a55;\n\n --mono: \"IBM Plex Mono\", ui-monospace, SFMono-Regular, Menlo, monospace;\n --sans: \"IBM Plex Sans\", system-ui, -apple-system, Segoe UI, sans-serif;\n\n --pad-top: clamp(2rem, 8vw, 5.5rem);\n --pad-bottom: 3rem;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: border-box;\n}\n\nbody {\n margin: 0;\n padding: var(--pad-top) 1.25rem var(--pad-bottom);\n background-color: var(--paper);\n /* Ledger ruling: the page is the book the registry keeps. */\n background-image: repeating-linear-gradient(\n to bottom,\n transparent 0 27px,\n rgba(22, 35, 43, 0.055) 27px 28px\n );\n color: var(--ink);\n font-family: var(--sans);\n font-size: 16px;\n line-height: 1.55;\n -webkit-font-smoothing: antialiased;\n}\n\n::selection {\n background: var(--stamp-taken);\n color: var(--card);\n}\n\na {\n color: inherit;\n text-decoration-color: var(--rule);\n text-underline-offset: 3px;\n}\n\na:hover {\n text-decoration-color: currentColor;\n}\n\n:focus-visible {\n outline: 2px solid var(--ink);\n outline-offset: 3px;\n}\n\n.sheet {\n max-width: 44rem;\n margin: 0 auto;\n}\n\n/* Before the first search there's only the title and the field, so sit them in\n the middle of the screen; results push the page back to a normal top flow. */\nbody:has(#result:empty) .sheet {\n display: flex;\n flex-direction: column;\n justify-content: center;\n min-height: calc(100dvh - var(--pad-top) - var(--pad-bottom));\n}\n\n.eyebrow {\n margin: 0 0 1.25rem;\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\nh1 {\n margin: 0;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(2.25rem, 7vw, 3.5rem);\n letter-spacing: -0.035em;\n line-height: 1;\n}\n\n/* ---------- lookup form ---------- */\n\n.lookup {\n display: grid;\n grid-template-columns: 1fr auto;\n align-items: end;\n gap: 1rem;\n margin: clamp(2rem, 6vw, 3rem) 0 0;\n}\n\n.label {\n display: block;\n margin-bottom: 0.4rem;\n font-size: 0.6875rem;\n font-weight: 500;\n letter-spacing: 0.16em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.input {\n display: block;\n width: 100%;\n padding: 0 0 0.35rem;\n border: 0;\n background: transparent;\n color: var(--ink);\n font-family: var(--mono);\n font-weight: 500;\n font-size: clamp(1.5rem, 5vw, 2rem);\n letter-spacing: -0.02em;\n}\n\n.input::placeholder {\n color: var(--rule);\n}\n\n.input:focus {\n outline: none;\n}\n\n.field-rule {\n position: relative;\n height: 2px;\n overflow: hidden;\n background: var(--ink);\n}\n\n.input:focus + .field-rule {\n box-shadow: 0 2px 0 var(--ink);\n}\n\n.field-progress {\n position: absolute;\n top: 0;\n left: -45%;\n width: 45%;\n height: 2px;\n background: var(--stamp-taken);\n opacity: 0;\n}\n\n.is-loading .field-progress {\n opacity: 1;\n animation: sweep 900ms linear infinite;\n}\n\n@keyframes sweep {\n from {\n left: -45%;\n }\n to {\n left: 100%;\n }\n}\n\n.search {\n /* Wide enough for \"Checking…\" so the field doesn't resize mid-lookup. */\n min-width: 10.5rem;\n padding: 0.85rem 1.6rem;\n border: 0;\n background: var(--ink);\n color: var(--paper);\n font-family: var(--mono);\n font-weight: 600;\n font-size: 0.8125rem;\n letter-spacing: 0.14em;\n text-transform: uppercase;\n cursor: pointer;\n transition: transform 120ms ease, background-color 120ms ease;\n}\n\n.search:hover:not(:disabled) {\n background: var(--stamp-taken);\n}\n\n.search:active:not(:disabled) {\n transform: translateY(1px);\n}\n\n.search:disabled {\n cursor: progress;\n background: var(--ink-2);\n}\n\n/* ---------- result cards ---------- */\n\n.result:empty {\n display: none;\n}\n\n.card {\n position: relative;\n margin-top: clamp(2rem, 5vw, 2.75rem);\n padding: 1.5rem clamp(1.25rem, 4vw, 2rem) 1.25rem;\n background: var(--card);\n border: 1px solid var(--rule);\n box-shadow: 4px 4px 0 rgba(22, 35, 43, 0.09);\n animation: card-in 220ms ease-out both, jolt 160ms ease-out 300ms both;\n}\n\n@keyframes card-in {\n from {\n opacity: 0;\n transform: translateY(8px);\n }\n to {\n opacity: 1;\n transform: translateY(0);\n }\n}\n\n@keyframes jolt {\n 0%,\n 100% {\n transform: translateY(0);\n }\n 45% {\n transform: translateY(2px);\n }\n}\n\n.card-head {\n display: flex;\n align-items: flex-start;\n justify-content: space-between;\n flex-wrap: wrap;\n gap: 1rem;\n}\n\n.card-title {\n margin: 0.15rem 0 0;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(1.25rem, 4.5vw, 1.6rem);\n letter-spacing: -0.02em;\n word-break: break-all;\n}\n\n.card-idn {\n margin: 0.2rem 0 0;\n font-family: var(--mono);\n font-size: 0.875rem;\n color: var(--ink-2);\n}\n\n/* The signature: a rubber stamp pressed onto the record. */\n.stamp {\n flex: none;\n margin: 0.25rem -0.25rem 0 0;\n padding: 0.3em 0.6em;\n border: 3px solid currentColor;\n outline: 1px solid currentColor;\n outline-offset: 3px;\n font-family: var(--mono);\n font-weight: 600;\n font-size: clamp(0.875rem, 3.2vw, 1.125rem);\n letter-spacing: 0.14em;\n text-transform: uppercase;\n opacity: 0.88;\n transform: rotate(-8deg);\n mix-blend-mode: multiply;\n animation: stamp-in 320ms cubic-bezier(0.2, 0.8, 0.3, 1) 240ms both;\n}\n\n.stamp--taken {\n color: var(--stamp-taken);\n}\n\n.stamp--free {\n color: var(--stamp-free);\n}\n\n@keyframes stamp-in {\n from {\n opacity: 0;\n transform: rotate(-8deg) scale(2.5);\n }\n 60% {\n opacity: 0.95;\n transform: rotate(-8deg) scale(0.94);\n }\n to {\n opacity: 0.88;\n transform: rotate(-8deg) scale(1);\n }\n}\n\n.verdict {\n margin: 1.25rem 0 0;\n max-width: 52ch;\n color: var(--ink-2);\n}\n\n.verdict strong {\n color: var(--ink);\n font-weight: 500;\n}\n\n.rows {\n margin: 1.4rem 0 0;\n display: grid;\n gap: 0.7rem;\n}\n\n.row {\n display: flex;\n align-items: baseline;\n gap: 0.6rem;\n}\n\n.row dt {\n flex: none;\n font-size: 0.6875rem;\n font-weight: 500;\n letter-spacing: 0.16em;\n text-transform: uppercase;\n color: var(--ink-2);\n}\n\n.leader {\n flex: 1 1 2rem;\n border-bottom: 1px dotted var(--rule);\n transform: translateY(-0.3em);\n}\n\n.row dd {\n margin: 0;\n flex: 0 1 auto;\n text-align: right;\n font-family: var(--mono);\n font-size: 0.9375rem;\n word-break: break-word;\n}\n\n.row dd .aside {\n color: var(--ink-2);\n}\n\n.row dd .stack {\n display: block;\n}\n\n.note {\n margin: 1.25rem 0 0;\n padding-left: 0.9rem;\n border-left: 2px solid var(--stamp-taken);\n font-size: 0.9375rem;\n color: var(--ink-2);\n}\n\n.source {\n margin: 1.5rem 0 0;\n padding-top: 0.85rem;\n border-top: 1px dotted var(--rule);\n font-family: var(--mono);\n font-size: 0.6875rem;\n letter-spacing: 0.08em;\n color: var(--ink-2);\n}\n\n/* ---------- narrow screens ---------- */\n\n@media (max-width: 34rem) {\n .lookup {\n grid-template-columns: 1fr;\n }\n\n .search {\n justify-self: stretch;\n }\n\n /* Stamp lands above the name, so a long domain can't push it around. */\n .card-head {\n flex-direction: column-reverse;\n align-items: stretch;\n }\n\n .stamp {\n align-self: flex-end;\n margin: 0 0 0.25rem;\n }\n\n .row {\n display: block;\n }\n\n .row dd {\n text-align: left;\n margin-top: 0.15rem;\n }\n\n .leader {\n display: none;\n }\n}\n\n@media (prefers-reduced-motion: reduce) {\n *,\n *::before,\n *::after {\n animation-duration: 0.001ms !important;\n animation-iteration-count: 1 !important;\n transition-duration: 0.001ms !important;\n }\n\n .is-loading .field-progress {\n left: 0;\n width: 100%;\n }\n}\n",[],[183,242],"7b55f35b-86bd-4005-b808-425a6cc2ee76","index.js","b8e328a8-89d4-11f1-9340-1607ee4eb77e",17,["D",1785168433624],"const form = document.getElementById(\"lookup\");\nconst input = document.getElementById(\"domain\");\nconst button = document.getElementById(\"search\");\nconst result = document.getElementById(\"result\");\n\nform.addEventListener(\"submit\", (event) => {\n event.preventDefault();\n search(input.value);\n});\n\n// Let a shared URL open straight onto its answer.\nconst initial = new URLSearchParams(location.search).get(\"q\");\nif (initial) {\n input.value = initial;\n search(initial);\n} else {\n input.focus();\n}\n\nasync function search(query) {\n const domain = query.trim();\n if (!domain) {\n input.focus();\n return;\n }\n\n setLoading(true);\n history.replaceState(null, \"\", `?q=${encodeURIComponent(domain)}`);\n\n try {\n const res = await fetch(`/api/lookup?domain=${encodeURIComponent(domain)}`);\n if (!res.ok) throw new Error(`lookup failed: ${res.status}`);\n render(await res.json());\n } catch {\n render({\n query: domain,\n domain,\n status: \"error\",\n message: \"The lookup service didn't answer. Check your connection and search again.\",\n });\n } finally {\n setLoading(false);\n }\n}\n\nfunction setLoading(loading) {\n form.classList.toggle(\"is-loading\", loading);\n button.disabled = loading;\n button.textContent = loading ? \"Checking…\" : \"Search\";\n}\n\nfunction render(data) {\n const card = document.createElement(\"article\");\n card.className = \"card\";\n card.innerHTML = data.status === \"registered\"\n ? registeredCard(data)\n : data.status === \"available\"\n ? availableCard(data)\n : messageCard(data);\n result.replaceChildren(card);\n}\n\nfunction registeredCard(data) {\n const r = data.record ?? {};\n const rows = [\n row(\"Registrar\", r.registrar ? withAside(r.registrar, r.registrarIanaId && `IANA ${r.registrarIanaId}`) : null),\n row(\"Registered\", dateCell(r.registered)),\n row(\"Expires\", dateCell(r.expires)),\n row(\"Updated\", dateCell(r.updated)),\n row(\"Status\", r.statuses?.length ? stack(r.statuses) : null),\n row(\"Name servers\", r.nameservers?.length ? stack(r.nameservers) : null),\n row(\"DNSSEC\", r.dnssec === undefined ? null : r.dnssec ? \"Signed\" : \"Unsigned\"),\n ].join(\"\");\n\n return `\n ${head(data, \"taken\", \"Registered\")}\n

${esc(data.domain)} is in the .${esc(data.tld)} registry.

${rows}\n ${note(data)}\n ${source(data)}\n `;\n}\n\nfunction availableCard(data) {\n return `\n ${head(data, \"free\", \"Available\")}\n

\n The .${esc(data.tld)} registry holds no record for ${esc(data.domain)}.\n A registrar should be able to sell it — reserved and premium names are the exception.\n

\n ${note(data)}\n ${source(data)}\n `;\n}\n\nfunction messageCard(data) {\n const titles = {\n invalid: \"Not a domain name\",\n unsupported: `.${data.tld} isn't reachable by RDAP`,\n error: \"No answer from the registry\",\n };\n const extra = data.status === \"unsupported\"\n ? `

ICANN's own lookup tool covers some registries that don't publish RDAP.

`\n : \"\";\n\n return `\n

${data.status === \"invalid\" ? \"Check the spelling\" : \"Can't check\"}

${esc(titles[data.status] ?? \"Lookup failed\")}

${esc(data.message ?? \"\")}

\n ${extra}\n ${source(data)}\n `;\n}\n\nfunction head(data, tone, stampLabel) {\n const idn = data.unicodeName && data.unicodeName !== data.domain\n ? `

${esc(data.unicodeName)}

`\n : \"\";\n\n return `\n

Registry record

${esc(data.domain)}

\n ${idn}\n

${esc(stampLabel)}

\n `;\n}\n\nfunction row(label, value) {\n if (!value) return \"\";\n return `

${esc(label)}

${value}

`;\n}\n\nfunction withAside(value, aside) {\n return aside ? `${esc(value)} ${esc(aside)}` : esc(value);\n}\n\nfunction stack(values) {\n return values.map((v) => `${esc(v)}`).join(\"\");\n}\n\nfunction dateCell(iso) {\n if (!iso) return null;\n const date = new Date(iso);\n if (Number.isNaN(date.getTime())) return esc(iso);\n return withAside(date.toISOString().slice(0, 10), relative(date));\n}\n\n/** \"3 years ago\" / \"in 2 months\", for judging how settled a registration is. */\nfunction relative(date) {\n const days = Math.round((date.getTime() - Date.now()) / 86_400_000);\n const fmt = new Intl.RelativeTimeFormat(\"en\", { numeric: \"auto\" });\n if (Math.abs(days) >= 365) return fmt.format(Math.round(days / 365.25), \"year\");\n if (Math.abs(days) >= 31) return fmt.format(Math.round(days / 30.44), \"month\");\n return fmt.format(days, \"day\");\n}\n\nfunction note(data) {\n return data.note ? `

${esc(data.note)}

` : \"\";\n}\n\nfunction source(data) {\n if (!data.source) return \"\";\n const at = data.answeredAt ? ` · ${data.answeredAt.slice(11, 19)} UTC` : \"\";\n return `

Answered by ${esc(data.source)}${esc(at)}

`;\n}\n\nfunction esc(value) {\n return String(value).replace(\n /[&<>\"']/g,\n (c) => ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[c]),\n );\n}\n",[],[183,250],"0ebe74f2-b02d-4ac6-9549-87db305ade6b","index.html","b8d5c3c0-89d4-11f1-96e4-1607ee4eb77e",19,["D",1785168433628],"\n\n \n \n \n WHOIS Lookup\n \n \n \n \n \n \n \n \n \n

WHOIS Lookup

\n\n \n\n

\n\n \n \n\n",[],[183,258],["D",1785168214803],[208,209,210],[183],"62a20e79-1d40-4355-836c-5dc3f1dc3c54","rdap.ts","b8d99310-89d4-11f1-aa02-1607ee4eb77e",10,["D",1785168215079],"import type { DomainRecord, LookupResult } from \"../shared/types.ts\";\n\n/** ICANN/IANA's authoritative map of TLD -> RDAP service. */\nconst BOOTSTRAP_URL = \"https://data.iana.org/rdap/dns.json\";\nconst BOOTSTRAP_TTL_MS = 12 * 60 * 60 * 1000;\nconst REQUEST_TIMEOUT_MS = 10_000;\n\n/**\n * Registries that run RDAP but that IANA's bootstrap file doesn't list.\n * Each entry was checked against a known-registered name in that exact TLD.\n * Never point a TLD at a service that isn't authoritative for it: a foreign\n * RDAP service answers 404, and 404 is how we read \"available\".\n */\nconst SUPPLEMENTAL_SERVICES: Record = {\n ac: \"https://rdap.identitydigital.services/rdap/\",\n de: \"https://rdap.denic.de/\",\n io: \"https://rdap.identitydigital.services/rdap/\",\n sh: \"https://rdap.identitydigital.services/rdap/\",\n};\n\ninterface BootstrapFile {\n publication: string;\n services: [string[], string[]][];\n}\n\nlet bootstrapCache: { fetchedAt: number; map: Map } | null = null;\n\nasync function getServiceMap(): Promise> {\n if (bootstrapCache && Date.now() - bootstrapCache.fetchedAt < BOOTSTRAP_TTL_MS) {\n return bootstrapCache.map;\n }\n\n const res = await fetch(BOOTSTRAP_URL, {\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n if (!res.ok) throw new Error(`IANA bootstrap returned ${res.status}`);\n const bootstrap = (await res.json()) as BootstrapFile;\n\n const map = new Map();\n for (const [tlds, urls] of bootstrap.services) {\n const base = urls.find((u) => u.startsWith(\"https://\")) ?? urls[0];\n if (!base) continue;\n for (const tld of tlds) map.set(tld.toLowerCase(), base);\n }\n for (const [tld, base] of Object.entries(SUPPLEMENTAL_SERVICES)) {\n if (!map.has(tld)) map.set(tld, base);\n }\n\n bootstrapCache = { fetchedAt: Date.now(), map };\n return map;\n}\n\ninterface NormalizedDomain {\n domain: string;\n unicodeName?: string;\n tld: string;\n labelCount: number;\n}\n\n/**\n * Reduce whatever was typed to an ASCII (punycoded) domain name. Accepts pasted\n * URLs and IDNs; drops a leading \"www.\" since it is never registrable itself.\n */\nexport function normalizeDomain(input: string): NormalizedDomain | { error: string } {\n const raw = input.trim().replace(/^[a-z][a-z0-9+.-]*:\\/\\//i, \"\").split(/[/?#]/)[0]\n .replace(/\\.$/, \"\");\n if (!raw) return { error: \"Enter a domain name to look up.\" };\n\n let hostname: string;\n try {\n hostname = new URL(`http://${raw}`).hostname;\n } catch {\n return { error: `\"${input.trim()}\" isn't a domain name.` };\n }\n\n const domain = hostname.replace(/^www\\./, \"\");\n const labels = domain.split(\".\");\n if (labels.length < 2) {\n return { error: `Add a top-level domain — try \"${domain}.com\".` };\n }\n if (domain.length > 253 || labels.some((l) => !/^[a-z0-9-]{1,63}$/.test(l))) {\n return { error: `\"${input.trim()}\" isn't a domain name.` };\n }\n\n // URL() punycodes IDNs one way only, so keep what was typed as the unicode form.\n const typed = raw.toLowerCase().replace(/^www\\./, \"\");\n const unicodeName = domain.includes(\"xn--\") && typed !== domain ? typed : undefined;\n return { domain, unicodeName, tld: labels[labels.length - 1], labelCount: labels.length };\n}\n\nexport async function lookupDomain(query: string): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) {\n return { query, domain: \"\", tld: \"\", status: \"invalid\", message: normalized.error };\n }\n\n const { domain, unicodeName, tld, labelCount } = normalized;\n const base = { query, domain, unicodeName, tld };\n\n const services = await getServiceMap();\n const service = services.get(tld);\n if (!service) {\n return {\n ...base,\n status: \"unsupported\",\n message:\n `IANA publishes no RDAP service for .${tld}, so the registry can't be asked directly.`,\n };\n }\n\n const url = `${service.replace(/\\/?$/, \"/\")}domain/${encodeURIComponent(domain)}`;\n const source = new URL(url).hostname;\n const answeredAt = new Date().toISOString();\n\n let res: Response;\n try {\n res = await fetch(url, {\n headers: { accept: \"application/rdap+json, application/json\" },\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n } catch (err) {\n // A registry that is slow or down is a normal outcome here, not a bug to\n // surface as a 500 — the visitor needs to know who failed to answer.\n const reason = err instanceof DOMException && err.name === \"TimeoutError\"\n ? `${source} took longer than ${REQUEST_TIMEOUT_MS / 1000} seconds to answer.`\n : `${source} couldn't be reached.`;\n return { ...base, status: \"error\", source, message: reason };\n }\n\n if (res.status === 404) {\n return {\n ...base,\n status: \"available\",\n source,\n answeredAt,\n note: labelCount > 2\n ? `${domain} has ${labelCount} labels. If it's a subdomain, look up the name it sits under instead.`\n : undefined,\n };\n }\n\n if (res.status === 429) {\n return {\n ...base,\n status: \"error\",\n source,\n message: `${source} is rate-limiting lookups. Wait a moment and search again.`,\n };\n }\n\n if (!res.ok) {\n return {\n ...base,\n status: \"error\",\n source,\n message: `${source} answered ${res.status} ${res.statusText}.`.trim(),\n };\n }\n\n const data = await res.json();\n if (data?.errorCode === 404) {\n return { ...base, status: \"available\", source, answeredAt };\n }\n\n return {\n ...base,\n domain: typeof data?.ldhName === \"string\" ? data.ldhName.toLowerCase() : domain,\n unicodeName: typeof data?.unicodeName === \"string\" ? data.unicodeName : unicodeName,\n status: \"registered\",\n source,\n answeredAt,\n record: parseRecord(data),\n };\n}\n\nfunction parseRecord(data: any): DomainRecord {\n const registrar = (data?.entities ?? []).find((e: any) => e?.roles?.includes(\"registrar\"));\n\n return {\n registrar: vcardValue(registrar?.vcardArray, \"fn\"),\n registrarIanaId: (registrar?.publicIds ?? []).find((id: any) =>\n id?.type === \"IANA Registrar ID\"\n )?.identifier,\n registered: eventDate(data, \"registration\"),\n expires: eventDate(data, \"expiration\"),\n updated: eventDate(data, \"last changed\"),\n statuses: (data?.status ?? []).filter((s: unknown) => typeof s === \"string\"),\n nameservers: (data?.nameservers ?? [])\n .map((ns: any) => typeof ns?.ldhName === \"string\" ? ns.ldhName.toLowerCase() : null)\n .filter(Boolean),\n dnssec: data?.secureDNS?.delegationSigned ?? undefined,\n };\n}\n\nfunction eventDate(data: any, action: string): string | undefined {\n const event = (data?.events ?? []).find((e: any) => e?.eventAction === action);\n return typeof event?.eventDate === \"string\" ? event.eventDate : undefined;\n}\n\n/** vCard entries are [\"fn\", {}, \"text\", \"Registrar Name\"] tuples. */\nfunction vcardValue(vcardArray: any, field: string): string | undefined {\n const entry = (vcardArray?.[1] ?? []).find((e: any) => e?.[0] === field);\n const value = entry?.[3];\n return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n}\n",[],[189,269],"7a41519d-ecbf-4354-802a-f254ccbf3360","porkbun.ts","5303dab6-9ff8-11f1-8157-1607ee4eb77e",20,["D",1787602431852],"import type { DomainAvailability, DomainPricing, PricingResult } from \"../shared/types.ts\";\nimport { normalizeDomain } from \"./rdap.ts\";\n\n/**\n * Porkbun publishes its whole retail price list unauthenticated, so a lookup\n * can carry a price without asking anyone for an API key. These are list\n * prices for ordinary names: premium and reserved names are quoted per-domain\n * and only Porkbun's authenticated checkDomain endpoint knows those.\n */\nconst PRICING_URL = \"https://api.porkbun.com/api/json/v3/pricing/get\";\nconst PRICING_TTL_MS = 6 * 60 * 60 * 1000;\n/** Per-name availability, unlike the list above, needs credentials. */\nconst CHECK_URL = \"https://api.porkbun.com/api/json/v3/domain/checkDomain/\";\nconst CHECK_TTL_MS = 10 * 60 * 1000;\nconst CHECK_TIMEOUT_MS = 15_000;\n/** Porkbun's documented default is one check per 10 seconds per account, and it\n * is billed against the account rather than the caller, so a burst of visitors\n * shares one budget. Assume the default until a response tells us otherwise. */\nconst DEFAULT_CHECK_WINDOW_MS = 10_000;\n/** Generous on purpose: Porkbun builds the whole 900-TLD list per request and\n * measures 15-20 seconds cold. Only the request that misses the cache waits. */\nconst REQUEST_TIMEOUT_MS = 30_000;\n\ninterface PricingResponse {\n status: string;\n pricing: Record;\n}\n\nlet cache: { fetchedAt: number; prices: Map } | null = null;\nlet inflight: Promise> | null = null;\n\nfunction getPrices(): Promise> {\n if (cache && Date.now() - cache.fetchedAt < PRICING_TTL_MS) return Promise.resolve(cache.prices);\n // That 15-20 second fetch is long enough that several visitors can pile up\n // behind it. They should share one request, not start their own.\n inflight ??= fetchPrices().finally(() => inflight = null);\n return inflight;\n}\n\nasync function fetchPrices(): Promise> {\n const res = await fetch(PRICING_URL, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });\n if (!res.ok) throw new Error(`Porkbun pricing returned ${res.status}`);\n const body = (await res.json()) as PricingResponse;\n if (body?.status !== \"SUCCESS\") throw new Error(`Porkbun pricing returned ${body?.status}`);\n\n const prices = new Map();\n for (const [rawSuffix, entry] of Object.entries(body.pricing ?? {})) {\n // Handshake names resolve outside ICANN DNS, so their prices describe\n // something this site can't look up in a registry.\n if (entry?.specialType === \"handshake\") continue;\n\n const suffix = rawSuffix.toLowerCase();\n const registration = amount(entry?.registration);\n const renewal = amount(entry?.renewal);\n const transfer = amount(entry?.transfer);\n if (registration === undefined && renewal === undefined) continue;\n\n prices.set(suffix, { suffix, registration, renewal, transfer, currency: \"USD\" });\n }\n\n cache = { fetchedAt: Date.now(), prices };\n return prices;\n}\n\nfunction amount(value: unknown): number | undefined {\n if (typeof value !== \"string\" || !value.trim()) return undefined;\n const price = Number(value);\n return Number.isFinite(price) ? price : undefined;\n}\n\ninterface CheckResponse {\n status: string;\n message?: string;\n code?: string;\n ttlRemaining?: number;\n response?: {\n avail?: string;\n price?: string;\n regularPrice?: string;\n firstYearPromo?: string;\n premium?: string;\n minDuration?: number;\n };\n limits?: { TTL?: number; limit?: number; used?: number };\n}\n\nconst checkCache = new Map();\nconst checkInflight = new Map>();\n/** Closed until this moment to stay inside Porkbun's per-account check budget. */\nlet checkGateUntil = 0;\n\n/** Absent credentials disable the check rather than failing the request: the\n * registry answer is the product, and this only annotates it. */\nfunction credentials(): { apikey: string; secretapikey: string } | null {\n const apikey = readEnv(\"PORKBUN_API_KEY\");\n const secretapikey = readEnv(\"PORKBUN_SECRET_API_KEY\");\n return apikey && secretapikey ? { apikey, secretapikey } : null;\n}\n\nfunction readEnv(name: string): string | undefined {\n try {\n return Deno.env.get(name) || undefined;\n } catch {\n return undefined; // no env access in this runtime\n }\n}\n\n/**\n * Ask Porkbun whether it will actually sell this exact name.\n *\n * Returns undefined for every \"we don't know\" case — no credentials, gate\n * closed, timeout, error, or an `avail` we don't recognise. Undefined must stay\n * indistinguishable from \"not asked\", because the caller renders a contradiction\n * of the registry's verdict and may only do that on an explicit answer.\n */\nexport async function checkAvailability(domain: string): Promise {\n const auth = credentials();\n if (!auth) return undefined;\n\n const cached = checkCache.get(domain);\n if (cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) return cached.availability;\n\n const pending = checkInflight.get(domain);\n if (pending) return pending;\n\n // One check per window across the whole account, so a name that misses the\n // cache while the gate is shut goes unanswered rather than queueing up behind\n // it — a visitor waiting 10 seconds for a garnish is worse than no garnish.\n if (Date.now() < checkGateUntil) return undefined;\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS; // shut it before awaiting\n\n const request = runCheck(domain, auth).finally(() => checkInflight.delete(domain));\n checkInflight.set(domain, request);\n return request;\n}\n\nasync function runCheck(\n domain: string,\n auth: { apikey: string; secretapikey: string },\n): Promise {\n let body: CheckResponse;\n try {\n const res = await fetch(`${CHECK_URL}${encodeURIComponent(domain)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(auth),\n signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),\n });\n // Porkbun reports a tripped rate limit as both 429 and a 200 whose status is\n // ERROR, so the body is what decides — but a 429 carries no useful body.\n if (res.status === 429) {\n checkGateUntil = Date.now() + DEFAULT_CHECK_WINDOW_MS;\n return undefined;\n }\n body = (await res.json()) as CheckResponse;\n } catch {\n return undefined;\n }\n\n // A window we were told about beats the assumed default.\n const windowMs = (body.limits?.TTL ?? body.ttlRemaining ?? 0) * 1000;\n if (windowMs > 0) checkGateUntil = Date.now() + windowMs;\n\n const avail = body.response?.avail;\n if (body.status !== \"SUCCESS\" || (avail !== \"yes\" && avail !== \"no\")) return undefined;\n\n const availability: DomainAvailability = {\n registrable: avail === \"yes\",\n premium: body.response?.premium === \"yes\",\n price: amount(body.response?.price),\n regularPrice: amount(body.response?.regularPrice),\n firstYearPromo: body.response?.firstYearPromo === \"yes\",\n minDuration: typeof body.response?.minDuration === \"number\" && body.response.minDuration > 1\n ? body.response.minDuration\n : undefined,\n checkedAt: new Date().toISOString(),\n };\n\n checkCache.set(domain, { checkedAt: Date.now(), availability });\n return availability;\n}\n\n/**\n * Price the name the visitor typed. Porkbun sells some ccTLDs at the second\n * level — `co.uk` is its own line item, priced apart from `uk` — so match the\n * longest suffix of the name that it actually lists.\n */\nexport async function lookupPricing(\n query: string,\n options: { checkAvailability?: boolean } = {},\n): Promise {\n const normalized = normalizeDomain(query);\n if (\"error\" in normalized) return { domain: \"\" };\n const { domain } = normalized;\n\n // Neither call needs the other's answer, so the per-name check doesn't wait\n // behind the price list's cold build.\n const [prices, availability] = await Promise.all([\n // A price is a garnish on the registry answer. If Porkbun is down or slow,\n // the visitor still keeps the thing they came for.\n getPrices().catch(() => null),\n options.checkAvailability ? checkAvailability(domain) : undefined,\n ]);\n\n return { domain, pricing: prices ? matchSuffix(domain, prices) : undefined, availability };\n}\n\nfunction matchSuffix(domain: string, prices: Map): DomainPricing | undefined {\n const labels = domain.split(\".\");\n for (let i = 1; i < labels.length; i++) {\n const pricing = prices.get(labels.slice(i).join(\".\"));\n if (pricing) return pricing;\n }\n return undefined;\n}\n",[],[189,277],"163aa5f4-c617-4f00-bba3-c0982dde2551","files.ts","b8cc58f8-89d4-11f1-9e1f-1607ee4eb77e",8,["D",1785168215152],"import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n\n/**\n * Val Town's file helpers resolve project files through the esm.town URL of the\n * running val, which doesn't exist when the same code runs from disk. These\n * wrappers keep `deno run` working for local preview; on Val Town they hand off\n * to the standard helpers untouched.\n */\n\nconst CONTENT_TYPES: Record = {\n css: \"text/css; charset=utf-8\",\n html: \"text/html; charset=utf-8\",\n js: \"text/javascript; charset=utf-8\",\n json: \"application/json; charset=utf-8\",\n svg: \"image/svg+xml\",\n};\n\nconst isLocal = (metaUrl: string) => metaUrl.startsWith(\"file://\");\n\nexport function readProjectFile(path: string, metaUrl: string): Promise {\n if (!isLocal(metaUrl)) return readFile(path, metaUrl);\n return Deno.readTextFile(new URL(`.${path}`, metaUrl));\n}\n\nexport async function serveProjectFile(path: string, metaUrl: string): Promise {\n if (!isLocal(metaUrl)) return serveFile(path, metaUrl);\n\n const body = await Deno.readTextFile(new URL(`.${path}`, metaUrl)).catch(() => null);\n if (body === null) return new Response(\"Not found\", { status: 404 });\n\n const extension = path.split(\".\").pop() ?? \"\";\n return new Response(body, {\n headers: { \"content-type\": CONTENT_TYPES[extension] ?? \"text/plain; charset=utf-8\" },\n });\n}\n",[],[189,285],["D",1785168214649],[204,205,206],[189],["D",1785166232232],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_18":56,"_102":103,"_104":25},{"_13":87,"_32":88,"_44":43,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":46,"_96":97},"ctx",{"_80":-5,"_124":332,"_333":334,"_335":336,"_337":25,"_338":25,"_339":25,"_340":60,"_341":-5,"_342":-7,"_343":-7,"_344":151,"_345":25,"_346":25,"_347":-5,"_348":25,"_349":25,"_350":25,"_351":-5},"ENV",{"_303":304,"_305":306,"_307":88,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v22